SecurityPaperCut Zero-Day Patch Urged
PaperCut Software warns of exploited zero-day in NG/MF, releases emergency patch and IoCs.
> Search
26 results for “zero-day”
Security
AI & MLAI's Offense Outpaces Its Defense
AI can find zero-days but still can't reliably write secure code, studies show.
SecurityLazarus zero-day fools Google in Dream Job wave
New Lazarus campaign abuses Windows zero-day and fake job lures to breach defense firms, fooling Google's filters.
SecurityIvanti Endpoint Manager Patches Critical Flaws
Ivanti releases updates for Endpoint Manager and Neurons for MDM addressing remotely exploitable vulnerabilities.
SecurityMicrosoft Patches 398 Flaws, One Exploited
August's Patch Tuesday addresses 398 vulnerabilities, including an actively exploited zero-day, as AI-driven discovery swells update volumes.
SecurityZero-Day in Windows Winsock Kernel Driver Exploited in Attacks
Microsoft's August Patch Tuesday fixes 421 CVEs, including one exploited zero-day and two publicly disclosed flaws.
SecuritySAP's Critical Patches Close Zero-Day-Style Gaps
SAP's August 2026 patch batch addresses 28 flaws, including a 10/10 severity bug in Commerce Cloud that could allow attackers to bypass authentication and execute code.
SecurityFramework data breach exposes customer details
A zero-day in Metabase exposed Framework customer names, emails, and addresses; payment data was safe.
SecurityMetabase Zero-Day Exploited Before Patch
Critical SQL injection flaw in Metabase allowed zero-day attacks; urgent patches released for self-hosted users.
SecurityCisco Investigates Zero-Day FMC Flaw
A static credential vulnerability in Cisco Secure FMC Software is undergoing active exploitation in the wild, according to the company.
SecurityRedis Patches Zero-Days Found by AI
Researchers used AI agents to uncover remote code execution vulnerabilities in Redis, prompting seven urgent security releases.
SecuritySonicWall SMA Breach: Root-Level Risk
A sophisticated threat actor utilized zero-day exploits to gain deep access to SonicWall VPN appliances before official patches existed.
SecurityLegacyHive: A New Windows Zero-Day
A persistent security researcher has unveiled a local privilege escalation bug for Windows 11, raising questions about severity.
SecurityAutomated Zero-Day Discovery via AI
Researchers are moving beyond theoretical AI capabilities, building automated pipelines to find live vulnerabilities in software.
SecurityMicrosoft's 622-Patch Record Shifts Risk
With a record-breaking July release, Microsoft faces mounting pressure as AI-driven discovery accelerates the vulnerability cycle.
SecuritySonicWall SMA1000 Zero-Day Crisis
Critical SSRF and code injection flaws in SMA1000 appliances are currently being exploited, prompting an urgent patching mandate.
SecurityJuly Patch Tuesday: 570 Flaws Resolved
Microsoft addresses a record-breaking 570 vulnerabilities in its July update, including three active zero-day exploits.
SecurityRedmond Patches RoguePlanet Zero-Day Amidst Ongoing Researcher Conflict
Microsoft has addressed the RoguePlanet vulnerability, ending a contentious saga with security researcher Nightmare Eclipse.
SecurityGoogle Chrome Zero-Day Vulnerabilities Demand Urgent User Vigilance
A critical high-risk vulnerability in Chrome’s Intents feature has been patched, marking the fifth exploited zero-day of the year.
SecurityApple Security Flaws Demand Immediate Response to Zero-Day Threats
Critical updates for iOS and macOS patch two actively exploited zero-day vulnerabilities affecting kernel and WebKit components.
SecurityZero-Day Escalation Highlights Critical Defender Exposure
A recently disclosed proof-of-concept exploit targeting Windows Defender brings renewed focus to the fragility of enterprise security software.
SecurityDefender Patch Flaw Risks Total Disk Saturation via Exploit
A fix for a critical zero-day vulnerability inadvertently introduces a secondary risk that could lead to complete hard drive exhaustion.
SecurityWhen Trusted Add-Ons Become Silent Gateways for Web Server Takeovers
The exploitation of critical Joomla extensions highlights a broader trend of automated campaigns targeting vulnerable CMS plugins globally.
SecurityThe Dark Risks of Trusting Shadowy Figures With Zero-Day Exploits
A look inside IRIS C2, a mysterious cyber firm offering multimillion-dollar bounties but secretly run by notorious political schemers.
SecurityThe Fragile Bridge: Why Progress Ordered an Immediate Server Shutdown
As Progress Software forces ShareFile servers offline, a sudden threat exposes the vulnerabilities inherent in hybrid storage systems.
SecurityBeyond the Patch: Inside the Urgent ShareFile Shutdown Mandate
Progress Software orders customers to sever internet access to their storage controllers, signaling an escalating, unpatched security risk.